$ rpki-client -vvf rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft File: Rfpu6-HepSLAREPPJSnpd5qY2I8.mft (raw, json) Hash identifier: Dh6vUJx6nMPV3M8K6zitB7DXWbbcgMnw26Jh5Jza4TQ= Subject key identifier: 3D:9A:0C:B2:24:EC:F3:FF:DA:F5:89:97:A6:9D:D4:F5:F6:C7:39:5F Authority key identifier: 45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F Certificate issuer: /CN=A916E343/serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft Manifest number: 0171 Signing time: Sat 23 Aug 2025 03:55:38 +0000 Manifest this update: Sat 23 Aug 2025 03:55:38 +0000 Manifest next update: Sat 30 Aug 2025 03:55:38 +0000 Files and hashes: 1: Rfpu6-HepSLAREPPJSnpd5qY2I8.crl (hash: pkmWh0MP+Xw6iyMHp2wzLJZbLxhSAO+X0uaPRq8jMY0=) 2: 798F13884BC511EE95462F4FC4F9AE02.roa (hash: AVNsCvyoIWNnSL3EVkTgsABpIGwTqMix3+lKD39yw+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E343, serialNumber=45FA6EEBE1DEA522C04443CF2529E9779A98D88F Validity Not Before: Aug 23 03:55:38 2025 GMT Not After : Aug 30 03:55:38 2025 GMT Subject: CN=68a93bba-2806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:07:ab:e4:9d:a0:ee:44:c4:8d:9c:4d:f3: 65:f1:40:81:cc:78:fe:02:66:69:8f:31:5b:7c:6a: b3:63:0b:1a:57:d4:10:36:31:e5:62:ff:44:8d:cc: 1f:f3:9b:c2:e0:a0:8f:37:87:fb:20:d1:f3:a7:62: c5:b9:24:ed:06:71:91:40:1b:fc:06:10:73:7c:0f: f3:dd:2b:e6:2f:ad:a9:2b:23:72:bf:d6:06:41:7c: b2:2f:b8:b8:8d:4d:8b:33:df:1c:7c:9c:e5:f1:cb: ba:44:82:ab:3e:6c:86:1a:8c:02:a8:f3:17:34:e4: 5d:df:2c:38:e1:82:c3:08:99:95:3b:02:74:f2:96: c3:73:5b:01:fa:32:5f:71:53:37:1a:42:f0:7a:83: d6:ef:58:0e:9a:f1:77:e1:8f:55:bd:b1:6b:da:a2: c3:fb:7f:6c:3d:80:88:3d:c3:3e:e2:a6:1c:e1:0a: ce:a8:a2:4e:0a:21:b7:93:51:9c:c7:8d:f6:82:35: 3b:d6:1e:cd:f0:2f:30:a3:09:c0:37:92:1b:1c:6a: 1b:5b:d8:ab:cc:15:ea:6f:25:53:d9:e6:df:39:d5: 2a:81:5a:ed:38:19:f4:37:6d:6a:4b:56:11:60:1c: c7:d2:db:63:e6:27:f3:50:15:6d:38:c0:fc:08:25: 1f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9A:0C:B2:24:EC:F3:FF:DA:F5:89:97:A6:9D:D4:F5:F6:C7:39:5F X509v3 Authority Key Identifier: keyid:45:FA:6E:EB:E1:DE:A5:22:C0:44:43:CF:25:29:E9:77:9A:98:D8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rfpu6-HepSLAREPPJSnpd5qY2I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/0D10F7B24BC511EEB66E6D4EC4F9AE02/Rfpu6-HepSLAREPPJSnpd5qY2I8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:6a:4c:94:92:04:9d:be:b4:fa:cc:87:12:dd:e0:69:f6:62: e5:80:fd:52:59:45:b5:2f:a2:5c:ab:cc:38:43:8a:f5:77:88: c6:e4:bf:a9:6d:dd:21:ee:ce:f7:1c:bf:7b:25:7b:99:fd:99: e0:cd:49:db:de:08:21:68:5f:69:92:1f:9b:4a:90:ce:17:c1: 27:04:94:54:43:da:6d:5a:ee:a4:51:bf:20:f6:7d:ab:2d:f1: 2e:0f:0c:5d:d5:1d:05:38:8e:d1:80:dc:98:da:bf:3f:be:73: 8b:a7:1d:b2:a3:c3:40:f2:d3:fd:a4:ca:23:cc:c8:25:ac:f4: 09:58:41:36:0b:b6:fa:d6:04:23:39:71:17:02:ad:89:b2:7d: 2e:7d:7e:45:83:2a:80:29:46:25:a1:09:69:72:ee:49:3a:71: 59:f1:45:8f:19:4f:3a:87:8d:86:6f:f0:c6:bc:f2:23:5d:2d: 40:0c:29:fd:62:2d:73:fd:60:12:55:5a:e1:7f:2f:1f:99:37: 0f:53:48:d5:7b:2f:e8:93:31:ad:26:fb:00:06:51:02:3e:6c: a7:41:9b:b0:ff:0c:88:fb:77:71:5a:b2:4c:c3:b3:e8:02:6f: 78:57:9e:79:3c:b0:67:1b:b9:d2:37:1b:4d:a8:b9:f5:9d:c7: 8d:40:52:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzNDMxMTAvBgNVBAUTKDQ1RkE2RUVCRTFERUE1MjJDMDQ0NDNDRjI1MjlFOTc3 OUE5OEQ4OEYwHhcNMjUwODIzMDM1NTM4WhcNMjUwODMwMDM1NTM4WjAYMRYwFAYD VQQDEw02OGE5M2JiYS0yODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BgHq+SdoO5ExI2cTfNl8UCBzHj+AmZpjzFbfGqzYwsaV9QQNjHlYv9Ejcwf 85vC4KCPN4f7INHzp2LFuSTtBnGRQBv8BhBzfA/z3SvmL62pKyNyv9YGQXyyL7i4 jU2LM98cfJzl8cu6RIKrPmyGGowCqPMXNORd3yw44YLDCJmVOwJ08pbDc1sB+jJf cVM3GkLweoPW71gOmvF34Y9VvbFr2qLD+39sPYCIPcM+4qYc4QrOqKJOCiG3k1Gc x432gjU71h7N8C8wownAN5IbHGobW9irzBXqbyVT2ebfOdUqgVrtOBn0N21qS1YR YBzH0ttj5ifzUBVtOMD8CCUflwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2aDLIk 7PP/2vWJl6ad1PX2xzlfMB8GA1UdIwQYMBaAFEX6buvh3qUiwERDzyUp6XeamNiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM0My8wRDEwRjdCMjRC QzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBTTEFSRVBQSlNucGQ1cVky STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JmcHU2LUhlcFNMQVJFUFBKU25wZDVxWTJJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM0My8wRDEwRjdCMjRCQzUxMUVFQjY2RTZENEVDNEY5QUUwMi9SZnB1Ni1IZXBT TEFSRVBQSlNucGQ1cVkySTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdakyUkgSdvrT6zIcS3eBp9mLlgP1SWUW1L6Jcq8w4Q4r1d4jG5L+p bd0h7s73HL97JXuZ/ZngzUnb3gghaF9pkh+bSpDOF8EnBJRUQ9ptWu6kUb8g9n2r LfEuDwxd1R0FOI7RgNyY2r8/vnOLpx2yo8NA8tP9pMojzMglrPQJWEE2C7b61gQj OXEXAq2Jsn0ufX5FgyqAKUYloQlpcu5JOnFZ8UWPGU86h42Gb/DGvPIjXS1ADCn9 Yi1z/WASVVrhfy8fmTcPU0jVey/okzGtJvsABlECPmynQZuw/wyI+3dxWrJMw7Po Am94V555PLBnG7nSNxtNqLn1nceNQFKU -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:20 2025 by rpki-client